Exam AZ-104 topic 2 question 80 discussion

YNN 1) Y, You can assign users MS Defender for Cloud Apps on a per user basis. 2) N, You cannot remove the P2 license as User1 is in Group1. 3) N, nested group assignments don't work

OpenAI "No: User1 is a member of Group1, which has been assigned the Azure Active Directory Premium P2 license, but not the Microsoft Defender for Cloud Apps Discovery license. Since Group1 does not have the Microsoft Defender for Cloud Apps Discovery license assigned, User1 cannot be assigned that license either. No: User1 is a member of Group1, which has been directly assigned the Azure Active Directory Premium P2 license. Since User1 inherits the license from Group1, the Azure Active Directory Premium P2 license cannot be removed from User1 individually. It can only be removed by removing the license assignment from Group1. No: User2 is a member of Group2, which is not directly assigned any licenses. Therefore, User2 does not inherit the Azure Active Directory Premium P2 license or any other license assigned to Group2. To assign the Azure Active Directory Premium P2 license to User2, it would need to be directly assigned to User2 or to a group that User2 is a member of."

1- No https://learn.microsoft.com/en-us/entra/fundamentals/concept-group-based-licensing "When a license is assigned to a group, all members of the group inherit the license. You can't assign the same license directly to a user who already has it through a group." 2- No 3- No "When a license is assigned to a group, all members of the group inherit the license. You can't assign the same license directly to a user who already has it through a group. https://learn.microsoft.com/en-us/entra/fundamentals/concept-group-based-licensing

In Azure tenant, you can delete all users whether a license is assigned or not, but you cannot delete a group with active license assignment.Azure prevents you from deleting a licensed group to avoid accidentally stripping licenses from all its members in one go If User1 has a license only because they’re a member of GroupA, you cannot go to User1’s license blade and strip it away directly.To remove the license from User1, you must either:Remove the license assignment from GroupA (so nobody in the group inherits it), or Remove User1 from GroupA (so they’re no longer in scope of that group-based license).

NYN 1. The option is off in the license Section. 2. Yes, if a license is assigned to a group in Azure AD, it is automatically assigned to all its members. 3. No, User2 will NOT receive the Azure AD P2 license. Reason: Nested Group Licensing is NOT Supported in Azure AD Licenses do NOT inherit through nested groups in Azure AD. If Group1 is assigned an Azure AD P2 license, only its direct members receive the license. Group2 (being a member of Group1) does NOT inherit the license, and neither do its members (like User2).

1) Y, You can assign users MS Defender for Cloud Apps on a per user basis. 2) N, You cannot remove the P2 license as User1 is in Group1. 3) N, nested group assignments don't work This sounds correct because license is on the group and the question only says about the user, so meaning directly from user properties but as you say its tricky question but I think this is correct, per user you can assign that license and you can't remove a license assigned via a group from the users properties. If you want to remove you must remove them from the group itself and nested group won't work for licensing.

"Group-based licensing currently doesn't support groups that contain other groups (nested groups). If you apply a license to a nested group, only the immediate first-level user members of the group have the licenses applied" https://learn.microsoft.com/en-us/entra/identity/users/licensing-group-advanced So it should be NYN. Please, before anwer and write explaination, please read the OFFICIAL Microsoft Documentation, not the Copilot or Chat Gpt answer. There are a lot of confusion here. Let's try to have a clean discussion, always reporting official Microsoft documentation link

#1-NO. Azure AD Premium P2 include Microsoft Defender for Cloud Apps Discovery.It is included in Microsoft 365 E3 and Microsoft Entra ID P1 licenses #2-YES. There are 2 method to remove P2 lic from User1: 1. Remove User1 from Group1. 2. Directly remove the P2 license from User1 #3-NO. nested group assignments don't work.

NNN #1 No - Microsoft Defender for Cloud Apps Discovery license is OFF. #2 No - Since the license is assigned to a group, you cannot remove the license from user1 directly. Instead, you remove the license by removing User1 from group1. #3 No - License assignments are restricted to only the first level of the group.

The link of youtube isn't correctly. You need to trust what he is saying, but you can check it by yourself. Create your tenant for free as an azure developer. I've in my test tenant E5 for developerSo: I created an user named "test user" I created a group named "test license" i assigned this license (E5 developer) to the group named "test license" where i turned off Microsoft defender for cloud apps. I wait few minutes so then user appear to the license tab where services enable are 65 of 66 ( Microsoft defender for cloud apps is the only one turned off ). After that, i assign directly to the user the same license, with different service option ( i keep everything turned on ). The result show: User has 2 assignment, directly and inherited from test license. The service enabled are 66 of 66 ( so microsoft defender for cloud apps is correctly assigned ). My answer are Y N N

NNN is the answer!

Final Answer : YNN

N,N,N, Gracias nchebbi, porque estas preguntas están resueltas en el video, donde hicieron el laboratorio. https://youtu.be/np-6s3N-1iQ?t=201

1. All Microsoft Cloud services that require user-level licensing are supported. This support includes all Microsoft 365 products, Enterprise Mobility + Security, and Dynamics 365. 2. Group-based licensing is currently available through the Azure portal and through the Microsoft Admin center. 3. Microsoft Entra ID automatically manages license modifications that result from group membership changes. Typically, license modifications are effective within minutes of a membership change. A user can be a member of multiple groups with license policies specified. A user can also have some licenses that were directly assigned, outside of any groups. The resulting user state is a combination of all assigned product and service licenses. If a user is assigned same license from multiple sources, the license will be consumed only once.

what is the correct answer?

Yes No No

This is very frustrating, why examtopics didnt added correct answers. For every question there is conflict answers in comment